Attempting to analyze credential harvesting portal that came within a phish.

Recently I came across a credential harvesting portal that was attached in a phish we received. One of our users fell for it but no harm was done we had them reset their password immediately and already had MFA enabled. I attempted to analyze this page on my own time and when trying to login to the fake Microsoft login portal it shows my burner account doesn't exist. I was hoping to enter the burner creds in order to prompt …

credential credential harvesting cybersecurity harm mfa own page password phish portal reset